Hacker goes through a business associate to attack a clinic

Athens (Ga.) Orthopedic Clinic is notifying an unspecified number of patients following a cyber attack on its electronic health records system that used the log-in credentials of an outside vendor who has since been terminated.

The breach occurred in mid-June, and the practice learned of the intrusion on June 27. While not confirmed in this case, many victims of cyber attacks don’t know they have been victimized until law enforcement agencies investigating another incident identify additional providers who have been attacked.